Fajar A. Nugraha wrote:

> Helmut Schneider wrote:
> 
>>> seems that the clamav Port (0.67-1) has problems with RAR Files
>>> (e.g. 
>>> Bagle.N):
>> 
>> To avoid missunderstandings, I know the file is pwd, but clamav does
>> not recognize the virus within the archive (maybe a DB problem)... 
>> 
> Sometimes the signatures were created using the complete mail, so
> clamscan won't recognize the attachment alone but it will recognize
> the complete mail.
> 
> If you use clamscan, you can work around RAR errors using
>     --unrar[=FULLPATH]                   Enable support for .rar files
> 
> But since the RARs are password-protected, it's useless.
> My suggestion is try feeding the complete virus mail to clamscan
> (instead of just the attachment), and see if it works.

Thats the point, if clamav would have detected the virus in the original mail I 
wouldn't have posted here... :)


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users

Reply via email to